CVE-2019-7351

Log Injection exists in ZoneMinder through 1.32.3, as an attacker can entice the victim to visit a specially crafted link, which in turn will inject a custom Log message provided by the attacker in the 'log' view page, as demonstrated by the message=User%20'admin'%20Logged%20in value...

CVE-2019-7351

Log Injection exists in ZoneMinder through 1.32.3, as an attacker can entice the victim to visit a specially crafted link, which in turn will inject a custom Log message provided by the attacker in the 'log' view page, as demonstrated by the message=User%20'admin'%20Logged%20in value...

CVE-2017-7351

REDCap 7.x is vulnerable to SQL injection in the file upload handler (SendITController:upload) prior to 7.0.11. The issue is triggered by a trailing substring in the upload endpoint, enabling an attacker to inject SQL through the file upload process. Impact: potential unauthorized database access...

CVE-2016-7351

...

CVE-2016-7351

CVE-2016-7351 is rejected/not used per the Initial Description.

CVE-2014-7351

The CVE-2014-7351 entry concerns the Global Movie Magazine Android app (com.magzter.globalmoviemagazine) version 3.0, where the app does not verify X.509 certificates when connecting to SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...